[Secure-testing-commits] r30244 - data/CVE

[security tracker role]

Author: sectracker
Date: 2014-11-22 09:11:46 +0000 (Sat, 22 Nov 2014)
New Revision: 30244

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-11-22 07:53:23 UTC (rev 30243)
+++ data/CVE/list	2014-11-22 09:11:46 UTC (rev 30244)
@@ -2823,6 +2823,7 @@
 	RESERVED
 CVE-2014-8090 [Incomplete fix for CVE-2014-8080]
 	RESERVED
+	{DLA-88-1}
 	- ruby1.8 <removed>
 	- ruby1.9.1 <removed>
 	- ruby2.0 <removed>
@@ -2844,6 +2845,7 @@
 CVE-2014-8081 (lib/execute/execSetResults.php in TestLink before 1.9.13 allows remote ...)
 	NOT-FOR-US: TestLink
 CVE-2014-8080 (The REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before ...)
+	{DLA-88-1}
 	- ruby1.8 <removed>
 	- ruby1.9.1 <removed>
 	- ruby2.0 <removed>
@@ -60223,6 +60225,7 @@
 CVE-2011-4816 (SQL injection vulnerability in the KPI component in IBM Maximo Asset ...)
 	NOT-FOR-US: IBM Maximo Asset Management
 CVE-2011-4815 (Ruby (aka CRuby) before 1.8.7-p357 computes hash values without ...)
+	{DLA-88-1}
 	- ruby1.8 1.8.7.358-1
 	- ruby1.9 <not-affected> (Includes randomisation of the hash function)
 	- ruby1.9.1 <not-affected> (Includes randomisation of the hash function)
@@ -67083,6 +67086,7 @@
 	RESERVED
 	NOT-FOR-US: sNews
 CVE-2011-2705 (The SecureRandom.random_bytes function in lib/securerandom.rb in Ruby ...)
+	{DLA-88-1}
 	- ruby1.8 1.8.7.352-1 (low; bug #635878)
 	- ruby1.9.1 1.9.3~preview1-1 (low)
 CVE-2011-2704 (Stack-based buffer overflow in MapServer before 4.10.7 and 5.x before ...)
@@ -67153,6 +67157,7 @@
 	- drupal6 6.22-1
 	[squeeze] - drupal6 6.18-1squeeze1
 CVE-2011-2686 (Ruby before 1.8.7-p352 does not reset the random seed upon forking, ...)
+	{DLA-88-1}
 	- ruby1.8 1.8.7.352-1 (low; bug #635878)
 CVE-2011-2685 (Stack-based buffer overflow in the Lotus Word Pro import filter in ...)
 	{DSA-2275-1}
@@ -74445,6 +74450,7 @@
 CVE-2011-0189 (The default configuration of Terminal in Apple Mac OS X 10.6 before ...)
 	NOT-FOR-US: Apple Mac OS
 CVE-2011-0188 (The VpMemAlloc function in bigdecimal.c in the BigDecimal class in ...)
+	{DLA-88-1}
 	- ruby1.8 1.8.7.352-1 (bug #628452)
 	- ruby1.9 <removed> (bug #628451)
 	- ruby1.9.1 1.9.2.290-1 (bug #628450)